AgencyLedge Privacy Policy

1. Information We Collect

We collect information that you affirmatively provide to us, as well as limited technical data generated automatically through platform usage.

• Directly Provided Information: Contact details including your full name, professional business email address, direct phone number, agency legal name, operating state, and transaction parameters submitted via contact forms, listing submission intake, or tool downloads.
• Marketplace Listing & NDA Records: Verification details submitted by prospective buyers or sellers, including self reported book metrics, Gross Written Premium volumes, licensing confirmations, and executed Non Disclosure Agreements.
• Operational Tool Inputs: Mathematical parameters entered into calculators, including premium volume estimates, EBITDA margins, commission splits, or entity filing dates. Calculation parameters processed in client side tools are not used to build persistent public profiles without your consent.
• Technical & Analytics Data: Standard internet protocol (IP) addresses, browser application types, referring web pages, operating system information, and navigational clickstream logs collected through Google Analytics 4.

2. How We Use Your Information

We process collected data strictly for legitimate commercial, operational, and security purposes:

• To display, manage, and facilitate confidential deal inquiries on our agency acquisition marketplace.
• To generate and route digital Non Disclosure Agreements between verified prospective purchasers and sellers.
• To distribute our weekly editorial publications, E&O autopsies, and transaction research alerts.
• To deliver scheduled statutory renewal notifications and annual report reminders requested by users.
• To detect, investigate, and prevent fraudulent listings, unauthorized scraping, or abusive activities.

3. Information Sharing & Third Party Disclosures

We maintain a strict zero sale policy regarding user data. Your information is disclosed only under the following defined operational parameters:

• Marketplace Counterparties: When a buyer initiates a listing inquiry or executes an NDA, their provided contact information and buyer profile are shared directly with the designated seller or authorized listing representative.
• Vetted Infrastructure Providers: We utilize secure third party vendors for hosting, database management, transactional email distribution, and PCI compliant payment gateways (such as Stripe). These entities process data exclusively under strict confidentiality terms.
• Statutory & Legal Compliance: We may disclose records where strictly required by enforceable legal subpoenas, court warrants, or binding regulatory mandates.

4. Cookies & Digital Tracking Technologies

AgencyLedge employs standard session cookies and persistent tracking identifiers to ensure core website functionality, retain filter preferences across our marketplace directories, and compile aggregated visitor behavior trends via Google Analytics 4.

You retain full control over cookie storage through your personal browser settings. Disabling essential cookies may limit certain interactive features, such as filtering tools or multi step forms.

5. Email Communications & CAN-SPAM Compliance

All promotional dispatches and intelligence newsletters delivered by AgencyLedge include an automated, single click unsubscribe link in the email footer. You may opt out of marketing distributions at any time.

Transactional communications, including listing status notices, password resets, inbound NDA execution alerts, and direct buyer inquiries, are operational in nature and will continue while your listing or account remains active.

6. Data Security & Retention Standards

We employ industry standard administrative, organizational, and technical safeguards, including HTTPS protocol encryption (TLS), server firewall architecture, and restricted administrative access credentials to protect personal data against unauthorized access, destruction, or disclosure.

However, no method of transmission across the public internet is perfectly impregnable. Users submit confidential business and transaction data at their own discretion.

7. B2B Direct Outreach

AgencyLedge is operated by GST Solutions d.o.o., Croatia, which acts as the data controller for the professional business information described in this section.

What We Collect

We may contact professionals across the United States insurance sector, including independent agency owners, operating principals, key staff, and M&A transaction advisors, regarding AgencyLedge free utilities, marketplace directories, and promotional options. For these activities, we process strictly professional business contact information: full name, business email address, agency or company name, professional role, operating state, and the verifiable source from which the business contact was identified.

Information Sources

We compile these professional details from publicly accessible business registers, official agency websites, state regulatory directories, professional corporate profiles, and verified B2B commercial intelligence partners.

Legal Basis & Territorial Scope

Our processing is based upon our legitimate commercial interest in notifying industry professionals about software tools and marketplace workflows directly pertinent to their operations (Article 6(1)(f) GDPR). We conduct business communications exclusively with corporate entities, and we do not initiate unsolicited direct marketing distributions to recipients within the European Union.

Retention Period

We maintain professional outreach records for up to twenty four months following our most recent correspondence, or until an opt out directive is submitted. When an individual opts out, their email address is preserved permanently on a global suppression register to ensure no future communications are initiated.

Subprocessors & Cross Border Data Transfers

We utilize dedicated email, database, and infrastructure providers (including Google Workspace, Smartlead, and Brevo) that handle data under binding data processing agreements. Certain infrastructure facilities reside within the United States. International transfers are governed under the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.

Your Rights & Regulatory Recourse

You may opt out of communications at any time by replying “stop” to any correspondence or by submitting a notice to [email protected]. Opt out notices are honored promptly, and in all cases within ten business days. You also hold the right to request access to, correction of, or deletion of your records, or to object to this processing. Inquiries are addressed within thirty days.

You additionally maintain the statutory right to submit an inquiry or complaint with the competent supervisory authority, the Croatian Personal Data Protection Agency (AZOP, azop.hr).

8. Individual Rights & State Specific Disclosures

Depending on your jurisdiction of residence, including California (CCPA/CPRA) and other applicable states, you may hold statutory rights to request confirmation of data collection, receive copies of personal data maintained in our records, or request the correction or deletion of your records.

To submit a formal data privacy verification or deletion request, please submit your inquiry through our dedicated compliance intake desk.